
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier: 6538uKBUznVJDjR1h/dQbygmADQq34ppCkmvy8mFpGs=
Subject key identifier: 45:87:AA:99:4B:44:4F:64:5D:48:67:A4:CA:63:D1:7B:E5:3A:8B:81
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 042E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number: 03F0
Signing time: Mon 27 Jul 2026 01:44:06 +0000
Manifest this update: Mon 27 Jul 2026 01:44:06 +0000
Manifest next update: Mon 03 Aug 2026 01:44:06 +0000
Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: aVesFUKBsokNfbGCZFzCnN3itBXkNfzHyEN3+DW0wc4=)
2: E31040027AA211F1A7425D4B5FA30FBC.roa (hash: R/9K4K6QZffUa+A09UevR5/cUaVC0oy01ZOS/2cVFB0=)
3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
4: 5EDCA5AC61BE11F1BC6CC5449047A888.roa (hash: RfyGAa3qye+BMhRuql0Q61Dpnspsmt7EFQ2dI7Ec2g0=)
5: 2E8796D201D811F1B1EB0BE0366F56BC.roa (hash: rCc2LJ3SHarCzukGEVF7yiv4Jot6jNEMODiytpZTHFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Jul 27 01:44:06 2026 GMT
Not After : Aug 3 01:44:06 2026 GMT
Subject: CN=6a66b7e6-9c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:b1:67:79:14:67:2b:16:09:26:bd:07:b4:
8c:b0:5b:a3:90:67:d3:2a:56:b9:c1:41:9a:4a:f5:
20:21:44:58:72:5b:c2:d1:d3:4d:cf:7a:1b:44:38:
b4:46:00:5c:a0:98:6b:6f:fc:ff:da:b6:2d:6a:ba:
74:a5:c6:d5:ee:46:a3:0f:99:ae:34:84:7e:0f:19:
c8:63:75:5d:8d:cb:ee:58:07:ca:80:18:35:23:39:
b7:15:3d:08:2d:42:f0:fb:3f:f8:00:96:ed:33:36:
0b:6b:4c:90:1b:5c:ee:ec:e7:97:c4:20:01:1f:93:
ad:67:ab:84:00:1d:a4:e7:fb:8c:e3:37:9a:48:f7:
72:60:3f:07:bf:af:8c:10:ce:fd:22:6e:fc:4c:6d:
ae:e8:72:95:45:e4:30:1c:71:ef:23:e2:f3:e3:1d:
fd:02:65:f3:00:ea:4a:20:d9:15:72:a4:84:f9:b5:
cc:dd:c9:95:f9:f3:68:ab:4f:93:8f:bf:51:a3:65:
f7:57:66:f9:dc:5a:78:b9:64:75:15:4a:e0:98:ff:
f1:07:e8:30:31:28:4b:0c:1c:d5:fd:63:9a:d0:f3:
be:c6:01:3f:56:1e:93:69:82:dd:a3:c8:dd:c6:e1:
25:c8:4a:bd:de:bb:05:3b:f9:84:13:fd:3e:72:76:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:87:AA:99:4B:44:4F:64:5D:48:67:A4:CA:63:D1:7B:E5:3A:8B:81
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:30:70:71:77:c0:a8:e6:4c:2b:c0:f6:7f:5d:55:a2:82:
65:c0:df:cd:62:76:0e:cb:f7:95:76:21:fc:43:9c:d5:5f:44:
c5:19:1e:28:15:22:9b:00:c7:d0:59:a2:bd:45:b5:f2:60:3e:
25:85:a4:66:61:b2:12:b2:a5:04:cf:f9:f3:87:d5:98:5f:51:
6c:2a:b6:ca:1f:53:65:9a:1a:4e:9a:66:7e:80:2b:c1:89:f4:
21:ba:7d:cd:9b:6c:e6:01:92:7c:22:d5:0a:62:86:0b:7b:67:
8f:14:9e:41:cf:06:bc:08:44:3a:41:e3:a9:2e:38:93:c0:ac:
dc:86:90:bd:88:30:7d:7d:3f:fa:50:c7:6f:6b:2b:21:b1:57:
9a:3d:50:6e:2c:1a:39:3b:d4:8a:56:20:c5:9a:47:2e:07:1a:
5a:e3:12:55:72:de:36:cc:9b:ac:36:0e:dc:07:62:4c:ff:81:
ed:56:e8:14:ab:6e:52:7b:1c:76:50:49:5c:26:f5:b4:82:da:
7b:4a:bb:59:3b:2a:c5:f0:85:46:d9:ff:b1:29:bf:38:6b:e8:
f1:01:9e:31:74:b8:7e:a5:86:ed:19:11:2a:6a:5c:50:33:c0:
42:48:64:1d:54:4a:7e:dd:8d:10:d7:e5:2d:92:10:9f:32:17:
8a:d5:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:55 2026 by rpki-client